You are implementing 'Psychological Acceptability' in a new multi-factor authentication system. Which design choice is most appropriate?